{
 "_doc": "One result as verifycorelabs.com prints it: the headline, the problem and the buyer cut (never reworded) from the lab's plain-English account of the result, the one figure a buyer is shown and its limit, and the lab's current claim and limits verbatim, copied at the commit named in source. A field is left out, never reworded, when it uses a word this site keeps for its own process or names a file this site does not serve (not_reprinted).",
 "slug": "unseeded-hunt",
 "company": "OrbitalProof",
 "order": null,
 "rank": 15,
 "served_receipt": "wireless-pqc/results/unseeded-hunt-11200.json",
 "lab_file_older": false,
 "headline": [
  "An automated attacker, given no hints, tried 11,200 combinations of known Wi-Fi sign-in attacks",
  "against the lab's own software models of its hardened versions of ten quantum-resistant Wi-Fi sign-in designs (not real Wi-Fi software), and found no attack that got through"
 ],
 "qualification": [
  "about 1,120 per design, roughly 1% of just the two-step combinations, while combinations of up to ten steps were allowed",
  "a search within a small fixed budget, not a proof that none exists"
 ],
 "why": [
  "Without an adversary the designers did not steer, the lab's claim that its repairs close combined attacks rests only on the attacks the lab thought to write down."
 ],
 "buyer": [
  "Wi-Fi chipset and access-point vendors, and Wi-Fi certification and test labs, assessing quantum-resistant sign-in designs."
 ],
 "figure": "searched 11,200 compound attacks over the whole design axis and found zero escapes",
 "figure_from": "claim",
 "limit": "Exhaustive only up to three families per compound; budgeted above that.",
 "limit_from": "lab scope",
 "quotes": {},
 "claim": "An unseeded adversary searched 11,200 compound attacks over the whole design axis and found zero escapes, with every elite non-vacuous; an exhaustive enumeration of the same grammar, every compound of up to three attack families on all ten designs, 53,485 in all, also found zero escapes.",
 "not_reprinted": [
  "limits"
 ],
 "prior_work": [
  {
   "title": "Illuminating search spaces by mapping elites",
   "by": "Jean-Baptiste Mouret, Jeff Clune, arXiv 1504.04909, 2015",
   "url": "https://arxiv.org/abs/1504.04909"
  },
  {
   "title": "Quality-Diversity Stress Tests for Process Reward Models: What Archive Coverage Can and Cannot Certify",
   "by": "Ibne Farabi Shihab, Fariya Afrin, arXiv 2608.08008, 2026",
   "url": "https://arxiv.org/abs/2608.08008"
  },
  {
   "title": "SAECRED: A State-Aware, Over-the-Air Protocol Testing Approach for Discovering Parsing Bugs in SAE Handshake Implementations of COTS Wi-Fi Access Points",
   "by": "Muhammad Daniyal Pirwani Dar, Rob Lorch, Aliakbar Sadeghi, Vincenzo Sorcigli, Héloïse Gollier, Cesare Tinelli, Mathy Vanhoef, Omar Chowdhury, author-hosted PDF (file name ieeesp2025.pdf), 2025",
   "url": "https://papers.mathyvanhoef.com/ieeesp2025.pdf"
  }
 ],
 "source": {
  "claims_file": "registry/CLAIMS_CURRENT.jsonl",
  "claims_sha256": "81776df15a1498abec7228ea179c952d01c54e031ffd4144498a30660963074b",
  "ranking_file": "views/VALUE_RANKING.md",
  "ranking_sha256": "2e980e26178b34dc49ec1d365f966be292f57d7c636143fc62c12feab72ae470",
  "dossier_sha256": "c79568b0afad5617a55bf7f07e4a73b5da4c3376828c1b116380108e4aaaf862",
  "commit": "25d755d2f06518b632c3658ae83f20312daac53e"
 }
}
